Proper study guides for Improve Cisco Designing Cisco Network Service Architectures certified begins with Cisco cisco 300 320 preparation products which designed to deliver the Pinpoint 300 320 arch dumps questions by making you pass the atr 42 300 320 test at your first time. Try the free ccdp arch 300 320 pdf demo right now.
♥♥ 2021 NEW RECOMMEND ♥♥
Free VCE & PDF File for Cisco 300-320 Real Exam (Full Version!)
★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 300-320 Exam Dumps (PDF & VCE):
Available on:
http://www.surepassexam.com/300-320-exam-dumps.html
Q101. A company uses site-to-site IPsec VPN tunnels established over the public internet as a backup to its private WAN. The interoffice IP telephony service quality is degraded when a failover event occurs. What known design limitation can cause this issue?
A. maximum headend router throughput
B. circuit bandwidth
C. transport reliability
D. number of remote sites
Answer: C
Q102. Which command can you enter to inject BGP routes into an IGP?
A. redistribute bgp
B. redistribute static
C. redistribute static subnet
D. default-information originate
Answer: A
Q103. Refer to the exhibit. A customer requires a web application implementation, but the web server has communication only to the application server and users, and the database server has communication only to the application server. What firewall design is the best fit for this scenario?
A. transparent mode with the servers on the same subnet
B. routed mode with three security zones
C. transparent mode with three security zones
D. routed mode with two security zones
Answer: B
Q104. Which two key components are related to one firewall per ISP design option for e-commerce? (Choose two.)
A. It is a common approach to single-homing.
B. This approach is commonly used in large sites.
C. Any failure on an edge router results in a loss of session.
D. It has one NAT to two ISP-assigned blocks.
E. It is difficult to set up and administer.
Answer: C,D
Q105. An HSRP design requirement states that preemption must be enabled for the active switch, which is a Cisco 4507R. Assume a boot time of 300 seconds. Which setting of the preemption delay timer minimizes the loss of traffic?
A. 50 seconds
B. 100 seconds
C. 150 seconds
D. 200 seconds
Answer: C
Q106. Refer to the exhibit.
Which statement about the ASA is true?
A. The management interface is reachable only from VLAN 30.
B. The management interface is reachable only from VLAN 40.
C. It is running in transparent mode.
D. It is running in routed mode.
Answer: C
Q107. What are two benefits of using 6to4 as an IPv6 transition method? (Choose two.)
A. 6to4 tunnels allow isolated IPv6 domains to be remotely connected over IPv4 networks.
B. Manual configuration (scalability) is easier.
C. Point-to-multipoint automatic tunneling (automatic 6to4) is available.
D. An infinite number of address spaces are allocated to an IPv6 subnet.
E. Globally unique IPv4 addresses are not required.
Answer: A,C
Q108. Which statement about IPS and IDS solutions is true?
A. IDS and IPS read traffic only in inline mode.
B. IDS and IPS read traffic only in promiscuous mode.
C. An IDS reads traffic in inline mode, and an IPS reads traffic in promiscuous mode.
D. An IDS reads traffic in promiscuous mode, and an IPS reads traffic in inline mode.
Answer: D
Q109. An organization is deploying a new load balancing environment to support sensitive applications. The security requirements include discrete IP segments used for VIPs and for the application hosts. What load balancer mode meets the requirements?
A. router
B. bridge
C. transparent
D. pass-through
Answer: A
Q110. What are the two methods of ensuring that the RPF check passes? (Choose two.)
A. implementing static mroutes
B. implementing OSPF routing protocol
C. implementing MBGP
D. disabling the interface of the router back to the multicast source
E. disabling BGP routing protocol
Answer: A,C